We currently have a large Windows 7 deployment with BitLocker turned on for all the laptops. We wish to migrate they retrieval of the BitLocker Recovery Keys to our Help Desk. Unfortunately we do not want them to have all the rights of a domain admin.
What are the minimum rights needed to view the BitLocker Recovery Keys in an Active Directory?
Ray Watters,
Chicago, IL.